Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PL7dJIswP-JC6znKRfDuVBoNa7E.roa
File: PL7dJIswP-JC6znKRfDuVBoNa7E.roa (raw, json)
Hash identifier: FnjRg3XyPnlAa4PnNmA06odukeYvXuZQgZ5zmt0GtAM=
Subject key identifier: 3C:BE:DD:24:8B:30:3F:E2:42:EB:39:CA:45:F0:EE:54:1A:0D:6B:B1
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3AD8E546CD2554D1D00C6A0A9887
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PL7dJIswP-JC6znKRfDuVBoNa7E.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134835
IP address blocks: 45.83.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3a:d8:e5:46:cd:25:54:d1:d0:0c:6a:0a:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cbedd248b303fe242eb39ca45f0ee541a0d6bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:0f:b7:bf:ba:55:6b:d0:b7:a0:4b:77:a2:
8d:2c:5a:dd:eb:bf:45:bb:b0:bd:d2:4e:6f:b6:8c:
c7:2d:ff:56:1a:c4:d2:70:1a:26:03:55:aa:9e:37:
c5:92:2d:18:66:2e:f3:be:04:5b:0a:c5:58:03:fe:
2d:9f:70:9a:3a:be:e7:3d:ca:18:40:37:fb:d9:10:
81:9f:c8:87:02:6b:bd:7b:7c:5a:0d:5c:88:64:90:
1c:80:46:2a:ae:e5:2d:f9:8f:2a:ff:3c:ac:39:a0:
15:a1:e3:9c:b3:4d:10:82:b6:6d:2f:83:94:34:34:
ba:a7:bb:8a:aa:da:8b:5c:85:c4:eb:a4:c0:5a:3b:
da:a0:60:df:a7:28:83:7c:78:30:c0:97:a6:5e:ae:
d4:96:99:05:58:cd:dc:64:a9:de:8c:bc:c0:f8:e4:
a0:32:57:74:54:f3:1d:95:32:30:74:33:81:eb:57:
8c:c0:15:2f:43:15:d5:57:bf:4c:48:81:d9:49:fc:
4d:8e:be:9b:a8:c5:8d:cc:26:e4:89:04:6c:a1:86:
9c:4c:6f:27:22:78:1c:2c:ca:89:a9:53:f6:27:a0:
1a:12:ac:86:44:26:e8:96:1a:f1:a1:7a:56:07:2f:
40:1c:0e:e2:8d:59:68:42:3b:0f:52:ed:e8:b3:ed:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:DD:24:8B:30:3F:E2:42:EB:39:CA:45:F0:EE:54:1A:0D:6B:B1
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/PL7dJIswP-JC6znKRfDuVBoNa7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:75:13:76:c7:ce:34:23:e6:a3:fa:82:8c:31:8c:ba:67:d2:
cd:f4:5a:d9:46:07:98:d7:4d:92:d8:9c:9b:08:21:66:0d:52:
fd:78:97:e0:63:fe:ec:6e:22:67:18:2c:76:7d:2c:e8:ed:97:
da:6d:ca:f7:02:bb:05:39:ad:43:c3:f4:7d:bd:5b:34:2c:c6:
86:09:cf:ef:e4:d5:94:c2:f6:2a:6c:68:8f:2e:4d:70:e1:ce:
c5:a4:04:0a:51:35:ae:82:7d:59:a6:68:ab:5e:53:ce:3a:cd:
e1:c5:d6:53:64:6b:27:67:fc:f9:dc:30:8e:87:6f:2b:79:ab:
29:4a:96:a4:6a:a6:6f:25:2f:4e:1d:cd:6f:5a:6c:92:30:98:
ef:25:83:82:33:ad:6a:a0:06:d3:23:0c:3e:bb:72:c4:68:6b:
22:18:dd:43:e2:31:33:4d:cb:2f:67:c2:c7:2f:4c:9e:9b:8c:
e2:d4:f9:2c:c3:5c:eb:a2:4b:58:a6:67:72:8a:f8:54:ba:1a:
2d:97:44:46:5b:40:41:a6:5e:f7:ae:dc:43:ed:52:03:06:75:
28:57:57:5e:ae:36:bc:7f:21:d8:4b:dc:f6:ae:b8:49:f5:a6:
ae:59:d2:f9:d5:db:da:a9:64:59:68:89:fe:44:bc:d8:72:b5:
f3:24:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org